airpatrol zonedefense overview
DESCRIPTION
AirPatrol ZoneDefense Overview. Introduction. Too simple for smart devices. The New Security Ecosystem. AirPatrol is the necessary component to this convergence and completes the security ecosystem. Explosion of mobile devices Estimated 7 billion NEW devices by 2015 - PowerPoint PPT PresentationTRANSCRIPT
AirPatrol ZoneDefense Overview
• Explosion of mobile devices• Estimated 7 billion NEW devices by 2015• Seismic shift causing IT to rethink the network • The network edge has fundamentally changed • The NEW asset – RF environment • Applying the proper security policy regardless of
device, ownership, or location
Introduction
Too simple for smart devices.
AirPatrol is the necessary component to this convergence
and completes the security ecosystem.
Physical Security
Cyber Security
The New Security Ecosystem
2
Location-based mobile security platform
Location-based services platform
Location-Based Services developer platform
Makes enterprise mobile security solutions location and context aware
Zone-based mobile app & information delivery for commercial, retail & consumer
Lets developers create location-based mobile apps, games and software solutions
Our Products
3
Monitor Wireless
Environment
Cellular & WiFi
Manage Endpoint
s
& Smart Devices
Laptops
Automate Policies
Smart Devices& Laptops
ZoneDefense
Elements of ZoneDefense
4
100% dedicated security
monitoring of the RF environment
• Accurately locates cellular and 802.11 a/b/g/n devices
• Provides real-time intrusion alertsLicense-enabled features: Customize for the features and performance you need
• Presents at-a-glance unified view of wireless network
• Displays cellular and 802.11 a/b/g/n devices on one console
• Offers forensic, network planning and optimization tools
• Automatically self-calibrates
5
ZoneDefense
Continuous Wireless Monitoring
6
LTE
CDMA
CDMA
GSM
GSM
GSM
GSM
GSM
LTE
CDMA
PARKING LOT
Sensor
Sensors also available as outdoor units.
7
• Dual Band WiFi Antenna• Cellular Low Band
Antenna• Cellular High Band
Antenna• DC IN, 12-48V• LAN/PoE In
ZD3030W sensors operate with a wireless mesh.
ZD3030 Sensor
7
8
• WiFi and Cellular Detection and Location • Representation on Floor Plan with new icon sets• International sensor addresses additional GSM spectrum
• Additional SW Programmable Narrow Band Scanning Receivers -Tunable over select ranges between 375 MHz & 2025 MHz to address new requirements.
Wi-Fi Receivers2.4 GHz, 5 GHz
Network InterfaceCard
(Standard TCP/IP)
Wideband Cellular Receiver 1
Scanning NarrowBand Receiver 1
Scanning NarrowBand Receiver 2
Wideband Cellular Receiver 2
ZD3030 Sensor
ZD-3030 sensor
9
ZD3030 Sensor
9
Example Multi-Floor Architecture
10
ZoneDefense
ZoneDefense
ZD3030 sensor
ZD3030 sensor
ZD3030 sensor
ZD3030 sensor
ZoneDefense Connect
ZoneDefense ConnectZoneDefense
ConnectDatabase
ZoneDefense
ZoneDefense:• ZD3030 sensors• ZoneDefense SW
ZoneDefense Connect:• Web-based • Remote Monitoring• Forensic Database
Sensor Architecture
11
Rapid Deployment Sensor (RDS)
Key Benefits and Features:• All benefits of a standard ZD3030 sensor
in a cable-free, rapid set-up design• Built-in wireless mesh node removes the
need for network cabling between sensors
• Can be powered by rechargeable batteries
• or plugged in• High-impact, weather-proof portable
case• Address North American & International
Bands
Ideal for:• Wireless security at temporary
operational centers or temporary meeting areas
• Wireless vulnerability assessments• Penetration testing• On-site system evaluations• In-conference monitoring
12
RDS Sensor Architecture
13
ZoneDefense
ZoneDefense PC
• As companies embrace a wireless ecosystem, they recognize the criticality of wireless security and the need to protect and manage the wireless assets they own.
• Infrastructure Authentication Policy Enforcement• No Multi-Homing• VPN policy enforcement• Connection Exceptions• Endpoint Firewall• Location-Aware
14
Secures Wireless and USB Connections to your Enterprise Laptops
Secure ZoneUnrestricted Area
Unmanaged Phone Entering Secure
Zone Triggers Alert
Managed Phone in Unrestricted Area Has Profile Consistent with
Unrestricted Zone Policy
You have entered a
secure zone. Camera and
Microphone has been disabled.
OKYou have exited the secure zone.
Camera and Microphone has been enabled.
OK
Managed Phone in High Security Area Has Profile
Consistent with High Security Zone Policy
• Monitor: Continuous monitoring for managed and unmanaged Cellular and WiFi Devices in your secure facility
• Manage: Apply the right policy at the right time on your managed devices
15
ZoneDefense – Monitor and Manage
Do you know your wireless environment?
Do you know what or where wireless devices
are?
Hidden Automated Devices
Forgotten, Compromised, Or…
WiFi on AND network connection
16
ZoneDefense – Situational Awareness
Dynamic Policy Configuration
17
Disaster
VIP Surrounding Personnel
18
Zones – Proximity and Circumstantial
19
Enterprise Management of Multiple Facilities
Monitoring Campus and Base Environment
20
ZoneDefense Mobile Device Monitoring
Managed Zone Policy Level:
Secure
Blue Devices: Known devices
• Enable proper device usage• Facilitate productive wireless device usage
Red Devices: Unknown, potential threat
• Locate in real time
• Enable prompt security response
• Enforce wireless security policies
21
Context
Action or
Content
Action or Content
Context
22
Engine
Location ProfileDevice
Information
BackendApplication
s
Communications
Alerts
PolicyModification
NetworkConfiguration
Maps
Reports
MDM
Off Premise
In Building
ZoneDefense Engine
23
How it WorksLocation
Presence
Profile
DeviceInformation
EnvironmentalInformation
NearbyResources
Preferences
ApplicationContext
More…
Schedule
TravelInformation
BackendApplications C
ontext APIs
Ad Content
InterfaceModification
Communications
Alerts
PurchaseRecommendations
Enterprise SocialInteractions
CRM input
ApplicationContent
More…
EMR/EHR actions
PolicyModification
NetworkConfiguration
Act
ion
API
s
Sensors
Data Engine
Open StorageWhen employee badges into an open storage room, their phone or tablet adapts to those security policies
Conference RoomWhen employee badges into the
Conference Room, their phone or tablet
adapts to the right security policies
Secure FacilityWhen employee badges into facility, their phone or tablet adapts to On-Site Wireless Security Policy
SCIFWhen employee keys into secure
area, their phone or tablet adapts to that area’s security
policies
Access Control
24
Integration with ID / Biometric Systems
24
1. Video Surveillance Dashboard before Cell Phone usage in Restricted area
2. Unauthorized cell phone usage located in restricted area by AirPatrol System
4. AirPatrol System triggers Video Surveillance System to present enlarged, highlighted image of unauthorized cell phone location
3. AirPatrol ZoneDefense alerts security personnel with audio & visual alarms
“Cellular Device in Zone 3”
25
Integration with Video Surveillance
25
Historical Playback
26
Reporting: Device Location Heat Maps
27
Report represents WiFi Device Locations in Zones 1 & 2 over 1 weekBlue = Authorized WiFi Device; Red = Unauthorized Device
Cellular Activity Timeline: Each bar represent amount of activity per hour in zone.
Report Parameters:Reporting Period Start TimeReporting Period End TimeFloor Name: 2nd FloorAlert Zone(s): Zone 3
AirPatrol Reporting Component (ARC)
28
29
Each bar represents the number of WiFi devices at 9am and 3pm within reporting zones.
Report Parameters:Start Time: 2/1/12, 12:00 AMEnd Time: 2/7/12, 11:59 PMFloor Name: 2nd FloorAlert Zone(s): Zones 1 & 2
Sund
ay3p
mM
onda
y3p
mTu
esda
y3p
mW
edne
sday
3pm
Thur
sday
3pm
Frid
ay3p
mSa
turd
ay
051015202530354045
UnknownKnown
Reporting: WiFi Activity Timeline
30
Awarded 2011 Top 10 Mobile Security Vendors to Watch by
2013 Innovator Award
Past Recognitions
31
PartnersLocation-Based,
Context-Aware Mobile Services
Mobile Device / Application Management
• New market paradigm -- enterprises and developers can locate, and contextually interact with both known and mobile devices
• AirPatrol is the only technology today that is capable of locating devices that are both registered and unregistered through Wi-Fi and cellular signals
• Partnering with dozens of mobile application, services & security providers to add location-based abilities
32
CustomersGovernment -
DefenseGovernment -
CivilianHealthcare / Life Sciences
Financial Services
Energy Other
A full spectrum of industries and markets
In a mobile world, location is everything.You can be there.
www.airpatrolcorp.com - [email protected]